Yea it's DISA STIG but this is still pretty much right.

Oh and they probably use some kind of VDI (Virtual Desktop Infrastructure) that requires minimum client hardware - basically just a monitor and a box for peripheral plugs and USB media. The actual guts is floating on a hard drive array somewhere in a secure fed datacenter.

Yea it's DISA STIG but this is still pretty much right.